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What is claimed is: 



1 . A method for establishing a peer-to-peer relationship enabling a remote peer 
on a peer-to-peer network to access a resource, comprising: 
5 receiving a request from a remote peer to access a resource; 

accessing one or more security identification values, the one or more security 
identification values representing respectively one or more access rights of the remote peer in 
an access control system; 

generating an access token for the access control system, the access token 
1 0 comprising the one or more security identification values; and 

accessing the resource on behalf of the remote peer, the access control system 
determining the level of access to the resource based on said one or more access security 
identification values in said token. 



15 2. A method according to claim 1 , the access control system including a generic 

user security identification value, said generic user security identification value being 
associated with a generic user account, said access token including said generic user security 
identification value. 



20 3. A method according to claim 2, the access control system including a plurality 

of resource groups, each of said groups being associated with one or more resources and one 
or more security identification values, said generic user identification value not being 
associated with any of said resource groups. 



25 4. A method according to claim 2, comprising generating a second access token 

in response to a request from a second remote peer, the second access token comprising a data 
structure that includes the generic security identification value. 



5. A method according to claim 2, comprising reverting from the generic user 
30 account upon termination of the execution thread. 
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6. A method according to claim 1 , at least one of the one or more security 
identification values corresponding to a resource group. 

7. A method according to claim 1 , at least one of the one or more security 
5 identification values corresponding to a role in a resource group. 

8. A method according to claim 1 , comprising: 
receiving credentials from the remote peer, and 

generating the one or more security identification values for the remote peer 
1 0 based on the credentials. 

9. A method according to claim 1 , further comprising: 

creating a generic user account within the access control system; 

creating a generic user security identification value associated with the generic 

15 user account. 

10. A method according to claim 9, the access control system including a plurality 
of resource groups, each of the resource groups being associated with one or more security 
identification values, the generic user security identification value not being associated with 

20 any of the resource groups. 

11. A method according to claim 1 , wherein the resource is a folder. 

12. A method according to claim 1 , wherein the resource is a file. 

25 

13. A method according to claim 1 , wherein the resource is a printer. 



14. 



30 requesting 



A method according to claim 1 , including; 

passing the duplicated access token to a separate operation in which the peer is 
access to a resource. 
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15. A method according to claim 14, including: 

creating a handle, the handle comprising an identification value for the 
separate operation. 

5 1 6. A computer program product for use on a computer connected to at least one 

other computer in a peer-to-peer networking environment, the computer having an access 
control system for determining the level of access to a resource based on one or more security 
identification values in an access token associated with an execution thread attempting to 
access the resource, the computer program product comprising: 
1 0 code for receiving a request to access a resource from a remote peer; 

code for accessing one or more security identification values which represent 
respectively one or more access rights of the remote peer in the access control system; 

code for generating an access token for use in conjunction with the access 
control system, the access token comprising the one or more security identification values; 
15 and 

code for accessing the resource on behalf of the remote peer. 

17. A computer program product according to claim 16, the code for generating an 
access token comprising code for generating an access token for a generic user account in the 

20 access control system, the generic user account having a generic user security identification 
value, the access token including the generic user security identification value. 

1 8. A computer program product according to claim 1 7, the computer program 
product including code for reverting from the generic user account upon termination of the 

25 execution thread. 

1 9. A computer program product according to claim 1 6, the computer program 
product including code for receiving credentials from a remote peer, and code for generating 
one or more security identification values for the remote peer based on the credentials. 

30 
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20. A computer program product according to claim 1 6, the computer program 
product including code for creating a generic user account within the access control system, 
and code for creating a generic user security identification value associated with the generic 
user account. 

21. A computer program product according to claim 1 6, the computer program 
product including code for passing the access token to a separate operation in which the peer 
is requesting the access to a resource. 

22. A computer program product according to claim 21 , the computer program 
product including code for creating a handle, the handle comprising an identification value for 
the separate operation. 

23. A computer program product comprising a computer readable medium having 
a computer executable program code disposed thereon, the code comprising; 

access control system code for determining the level of access to a resource 
based upon one or more security identification values in an access token; 

code for receiving a request to access a resource from a remote peer on a peer- 
to-peer network; 

code for accessing one or more security identification values, the one or more 
security identification values representing respectively one or more access rights of the 
remote peer for use in conjunction with the access control system; 

code for generating an access token, the access token including the one or 
more security identification values for use in conjunction with the access control system; and 

code for accessing the resource on behalf of the remote peer. 

24. A computer program product for use on a computer connected to at least one 
other computer in a peer-to-peer networking environment, the computer having an access 
control system for determining the level of access to a resource based on one or more security 
identification value in an access token associated with an execution thread attempting to 
access the resource, the computer program product comprising: 
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installation code for placing computer-readable program code onto a medium 
readable by the computer, the computer readable program code comprising: 

code for receiving a request to access a resource from a remote peer; 

code for accessing one or more security identification values which represent 
5 respectively one or more access rights of the remote peer in the access control system; 

code for generating an access token for use in conjunction with the access 
control system, the access token comprising the one or more security identification value; and 

code for accessing the resource on behalf of the remote peer. 

10 25. A computer program product according to claim 24, the code for generating an 

access token comprising code for generating an access token for a generic user account in the 
access control system, the generic user account having a generic user security identification 
value, the access token including the generic user security identification value. 

15 26. A computer program product according to claim 25, the computer readable 

program code including code for reverting from the generic user account upon termination of 
the execution thread. 

27. A computer program product according to claim 24, the computer readable 
20 program code including code for receiving credentials from a remote peer, and code for 

generating one or more security identification values for the remote peer based on the 
credentials. 

28. A computer program product according to claim 24, the computer readable 
25 program code including code for creating a generic user account within the access control 

system, and code for creating a generic user security identification value associated with the 
generic user account. 

29. A computer program product according to claim 24, the computer readable 

30 program code including code for passing the access token to a separate operation in which the 
peer is requesting access to a resource. 
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30. A computer program product according to claim 29, the computer readable 
program code including code for creating a handle, the handle comprising an identification 
value for the separate operation. 

5 

31. A computer program product comprising a computer-readable medium having 
computer executable program code disposed thereon, the code comprising: 

installation code for placing computer-readable program code onto a medium 
readable by the computer, the computer readable program code comprising: 
10 access control system code for determining the level of access to a resource 

based upon one or more security identification value in an access token; 

code for receiving a request to access a resource from a remote peer on a peer- 
to-peer network; 

code for accessing one or more security identification values, the one or more 
1 5 security identification values representing respectively one or more access rights of the 
remote peer for use in conjunction with the access control system; 

code for generating an access token comprising the one or more security 
identification values for use in conjunction with the access control system; and 
code for accessing the resource on behalf of the remote peer. 

20 

32. A computer having a computer program executing thereon, the computer 
program comprising executing computer-readable program code, the computer-readable code 
comprising: 

code for receiving a request to access a resource from a remote peer; 
25 code for accessing one or more security identification values which represent 

respectively one or more access rights of the remote peer in the access control system; 

code for generating an access token for use in conjunction with the access 
control system, the access token comprising the one or more security identification values; 
and 

30 code for initiating an execution thread for accessing the resource on behalf of 

the peer, the execution thread being associated with the access token. 
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33. A computer according to claim 32, the code for generating an access token 
comprising code for generating an access token for a generic user account in the access 
control system, the generic user account having a generic user security identification value, 

5 the access token including the generic user security identification value. 

34. A computer according to claim 33, the computer-readable program code 
including code for reverting from the generic user account upon termination of the execution 
thread. 

10 

35. A computer according to claim 32, the computer-readable program code 
including code for receiving credentials from a remote peer, and code for generating one or 
more security identification values for the remote peer based on the credentials. 

1 5 36. A computer according to claim 32, the computer-readable program code 

including code for creating a generic user account within the access control system and code 
for creating a generic user security identification value associated with the generic user 
account. 

20 37. A computer according to claim 32, the computer-readable program code 

including code for passing the token to a separate operation in which the peer is requesting 
access to a resource. 

38. A computer according to claim 37, the computer-readable program code 
25 including code for creating a handle, the handle an identification value for the separate 

operation. 

39. A computer having a computer program executing thereon, the computer 
program comprising executing computer-readable program code, the computer-readable code 

30 comprising; 
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access control system code for determining the level of access to a resource 
based upon one or more security identification values in an access token; 

code for receiving a request to access a resource from a remote peer on a peer- 
to-peer network; 

5 code for accessing one or more security identification values, the one or more 

security identification values representing respectively one or more access rights of the 
remote peer for use in conjunction with the access control system; 

code for generating an access token comprising the one or more security 
identification values for use in conjunction with the access control system; and 
1 0 code for accessing the resource on behalf of the remote peer. 

40. A computer system comprising a peer-to-peer network, the peer-to-peer 
network comprising a plurality of computers, each of the computers being connected to at 
least one other computer oh the peer-to-peer network, at least one of the computers having 

15 program code disposed on a medium readable by the computer, the program code comprising: 
code for receiving a request to access a resource from a remote peer; 
code for accessing one or more security identification values which represent 
respectively one or more access rights of the remote peer in the access control system; 

code for generating an access token for use in conjunction with the access 
20 control system, the access token comprising the one or more security identification values; 
and 

code for accessing the resource on behalf of the remote peer. 

41. A computer system according to claim 40, the code for generating an access 
25 token comprising code for generating an access token for a generic user account in the access 

control system, the generic user account having a generic user security identification value, 
the access token including the generic user security identification value. 



30 



42. A computer system according to claim 41 , the code including code for 
reverting from the generic user account upon termination of the execution thread. 
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43. A computer system according to claim 40, the code including code for 
receiving credentials from a remote peer, and code for generating one or more security 
identification values for the remote peer based on the credentials. 

5 44. A computer system according to claim 40, the code including code for creating 

a generic user account within the access control system, and code for creating a generic user 
security identification value associated with the generic user account. 

45. A computer system according to claim 40, the code including code for passing 
10 the token to a separate operation in which the peer is requesting access to a resource. 

46. A computer system according to claim 45, the code including code for creating 
a handle, the handle comprising an identification value for the separate operation. 



15 47. A computer system comprising a peer-to-peer network, the peer-to-peer 

network comprising a plurality of computers, each of the computers being connected to at 
least one other computer on the peer-to-peer network, at least one of the computers having 
program code disposed on a medium readable by the computer, the program code comprising: 
access control system code for determining the level of access to a resource 
20 based upon one or more security identification values in an access token; 

code for receiving a request to access a resource from a remote peer on a peer- 
to-peer network; 

code for accessing one or more security identification values, the one or more 
security identification values representing respectively one or more access rights of the 
25 remote peer for use in conjunction with the access control system; 

code for generating an access token comprising the one or more security 
identification values for use in conjunction with the access control system; and 

code for accessing the resource on behalf of the remote peer. 



